What
Claude Code checks inline shell commands, the terminal commands it writes and runs for you, and can ask you before running ones that delete files. That check now runs a second pass when the command uses one of these words, which set shell variables:
The Bash permission checks also gain two new reasons for a decision, assigned-variable and loop-later-pass. Both are counted as results of reading the command without running it.
Setting the CLAUDE_CODE_DISABLE_INLINE_SHELL_RM_PROMPT environment variable turns this check off.
Why
Permission checks on commands that set variables, and on commands with loops, now look more closely, so a delete hidden behind a variable is more likely to be caught before it runs.